$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa File: q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa (raw, json) Hash identifier: 8AfDeKcVLOER5uXNQ7BZPxYub7rr+BCnrW/bBLs/kyM= Subject key identifier: AB:E6:B5:FF:76:3D:82:45:F9:C7:68:3A:21:DB:05:44:FE:FB:21:75 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0C43 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa Signing time: Mon 26 Aug 2024 05:19:23 +0000 ROA not before: Mon 26 Aug 2024 05:19:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131619 IP address blocks: 103.116.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Aug 26 05:19:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ABE6B5FF763D8245F9C7683A21DB0544FEFB2175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:0a:07:98:4c:5a:42:7f:62:85:d6:ff:a6: 17:b3:8e:32:3d:7f:27:e0:6f:0a:25:27:bd:c0:e3: 13:69:cc:1d:63:f5:82:6a:ea:c1:40:d4:45:da:96: 4b:37:44:9e:56:01:46:95:21:11:c8:84:fc:81:1a: d7:66:26:82:92:b4:a2:2f:ad:96:6e:4b:2e:31:67: c8:27:93:63:a4:ef:0e:ca:ff:19:e9:c8:5c:93:28: fa:db:1b:a3:12:07:5c:b1:92:3c:29:5f:ef:68:b9: 32:52:0f:e2:b2:6d:6d:7d:9b:10:1c:11:d0:c4:22: 5e:65:91:07:a7:d7:1d:c0:4a:c2:a2:d6:ce:35:37: db:d5:06:81:97:44:1b:17:4c:38:c1:eb:59:70:78: b4:6f:57:fe:98:9f:40:21:89:23:d7:69:44:04:64: 1c:5c:3f:a6:d7:14:57:81:c4:bc:65:06:99:a7:e9: 52:11:5b:f7:fc:40:75:1c:94:a0:53:e4:d6:d4:4a: 56:cd:cc:a3:92:e0:aa:2a:69:3d:3d:1b:ce:b3:dc: 6a:42:27:d7:49:ae:b2:d9:ed:a0:35:cf:64:3c:c0: 88:58:27:9e:1c:84:e4:78:f2:be:ed:44:6e:f7:60: e1:c7:96:64:ff:db:80:2a:50:23:57:ca:bd:ac:35: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E6:B5:FF:76:3D:82:45:F9:C7:68:3A:21:DB:05:44:FE:FB:21:75 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.98.0/24 Signature Algorithm: sha256WithRSAEncryption 83:82:b3:6e:b3:e9:73:ac:a7:cc:c8:dd:fa:b4:b5:40:90:34: b9:19:f5:9a:b6:3e:69:e7:c3:04:3e:ea:5d:83:d8:e8:84:c6: 5c:54:6b:3a:e7:7a:e4:8d:80:8a:d8:fb:82:ed:8c:0e:3d:1e: 9b:e6:81:18:9e:57:9e:af:89:44:1d:68:5d:db:84:ab:ed:5d: 36:31:25:e4:82:7c:1c:84:c5:1d:bd:ca:29:03:3f:6b:56:85: aa:26:6b:4c:5d:c2:80:f1:73:ec:b0:22:05:36:ed:da:c8:5c: c7:9a:fd:bf:a1:5a:ae:81:1a:fa:4c:8c:e9:cd:bd:a1:be:74: 97:b3:20:42:f6:d2:c2:e0:1f:a7:59:48:6f:a7:f5:16:78:c2: 59:1e:7b:e8:97:3e:69:43:f6:28:52:59:76:c5:03:53:4c:cf: 1d:fc:e5:b3:94:7d:75:d9:2f:80:4e:b3:89:b1:7c:c6:36:cc: a1:e3:32:74:fd:19:98:45:20:ad:ff:27:d4:d8:05:83:b0:11: 33:37:3a:fe:81:17:96:0c:c6:7a:b9:a1:be:1c:1b:3d:2d:92: 8a:2b:6c:04:71:be:14:23:e1:4c:cf:f2:3e:1e:78:c1:c3:d0: 5f:63:21:06:0e:d3:0b:f9:4d:f1:7c:ed:99:d1:5a:dc:44:1d: e1:d2:77:7f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNDA4MjYw NTE5MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCRTZCNUZGNzYzRDgy NDVGOUM3NjgzQTIxREIwNTQ0RkVGQjIxNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvAQoHmExaQn9ihdb/phezjjI9fyfgbwolJ73A4xNpzB1j9YJq 6sFA1EXalks3RJ5WAUaVIRHIhPyBGtdmJoKStKIvrZZuSy4xZ8gnk2Ok7w7K/xnp yFyTKPrbG6MSB1yxkjwpX+9ouTJSD+KybW19mxAcEdDEIl5lkQen1x3ASsKi1s41 N9vVBoGXRBsXTDjB61lweLRvV/6Yn0AhiSPXaUQEZBxcP6bXFFeBxLxlBpmn6VIR W/f8QHUclKBT5NbUSlbNzKOS4KoqaT09G86z3GpCJ9dJrrLZ7aA1z2Q8wIhYJ54c hOR48r7tRG73YOHHlmT/24AqUCNXyr2sNRLvAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUq+a1/3Y9gkX5x2g6IdsFRP77IXUwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9xLWExXzNZOWdrWDV4 Mmc2SWRzRlJQNzdJWFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3RiMA0GCSqGSIb3DQEBCwUAA4IBAQCDgrNus+lzrKfMyN36tLVAkDS5GfWa tj5p58MEPupdg9johMZcVGs653rkjYCK2PuC7YwOPR6b5oEYnleer4lEHWhd24Sr 7V02MSXkgnwchMUdvcopAz9rVoWqJmtMXcKA8XPssCIFNu3ayFzHmv2/oVqugRr6 TIzpzb2hvnSXsyBC9tLC4B+nWUhvp/UWeMJZHnvolz5pQ/YoUll2xQNTTM8d/OWz lH112S+ATrOJsXzGNsyh4zJ0/RmYRSCt/yfU2AWDsBEzNzr+gReWDMZ6uaG+HBs9 LZKKK2wEcb4UI+FMz/I+HnjBw9BfYyEGDtML+U3xfO2Z0VrcRB3h0nd/ -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org